Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
File:                     e5q4nC36bjo-yHXuV_4sDZpxQcA.mft (raw, json)
Hash identifier:          dlmnCNCTJXFXhv0g92SWRKH0FwwFFVeJqZ7jGVRo0l4=
Subject key identifier:   8E:F0:3E:3A:65:23:01:51:3D:F8:76:9E:B1:F3:38:17:0D:CA:F0:27
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Certificate issuer:       /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial:       FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
Manifest number:          FB
Signing time:             Fri 31 Jan 2025 02:57:55 +0000
Manifest this update:     Fri 31 Jan 2025 02:57:55 +0000
Manifest next update:     Sun 02 Feb 2025 02:57:55 +0000
Files and hashes:         1: e5q4nC36bjo-yHXuV_4sDZpxQcA.crl (hash: v3pf3om20NlD4/yOCh04PTgDVPBGsRa1iA6kLRgXxlg=)
                          2: 41B9BD06230F11EF89072D357DDC24C2.roa (hash: Vju6CP63vk7sWntfujwYKbfkTEsNT3KYrBm9nMWtFv8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
        Validity
            Not Before: Jan 31 02:57:55 2025 GMT
            Not After : Feb  2 02:57:55 2025 GMT
        Subject: CN=679c3c33-d564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:98:77:1a:d2:3e:bd:82:a5:11:96:67:0a:
                    34:78:fa:7a:2d:54:34:44:7f:88:01:e0:8a:e0:80:
                    b3:f2:f6:9b:2a:16:4e:2b:31:ae:18:71:9a:7b:ac:
                    f4:6e:56:39:98:a4:cd:7d:5f:16:e4:95:90:04:d9:
                    e1:e8:e9:12:9b:12:94:34:80:fc:ba:ba:2b:a2:17:
                    45:2a:4d:4d:95:8a:70:95:c1:a4:df:51:0c:d6:fe:
                    50:bf:05:ba:d1:68:4c:59:4a:37:76:36:48:d2:1d:
                    d2:4a:b3:eb:12:45:09:a0:d1:6b:db:ac:6a:62:4c:
                    e5:6d:0d:0e:b1:8f:f8:a4:6b:53:a6:03:15:2e:8e:
                    f3:ac:66:63:b1:6d:2d:fe:e3:f2:b8:52:59:bb:30:
                    66:97:91:ad:1b:0c:6a:a5:f6:d5:05:dc:c3:33:ac:
                    10:d9:f9:25:47:d8:01:a2:ee:60:2e:da:85:36:5e:
                    e1:30:e2:23:15:19:c0:37:3a:fe:4c:57:3d:c0:60:
                    ed:a5:76:c6:63:01:1c:80:00:ce:01:75:f1:31:51:
                    bf:02:88:95:d5:97:6e:e6:30:80:47:36:fe:6a:02:
                    53:2f:b3:a7:91:fd:f1:fa:68:56:2d:b5:11:57:bf:
                    14:64:b4:df:90:71:77:d8:0f:9c:2f:ea:04:ff:2a:
                    67:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F0:3E:3A:65:23:01:51:3D:F8:76:9E:B1:F3:38:17:0D:CA:F0:27
            X509v3 Authority Key Identifier:
                keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:cb:ca:c3:2f:9c:05:c4:b0:38:1b:3b:e0:41:25:ab:35:
         3d:de:93:de:97:b2:26:75:0c:b8:45:85:ca:d9:bf:3b:5d:34:
         5c:df:9f:9f:8d:e1:fd:a3:f0:ff:cb:51:5e:5c:49:ec:84:1a:
         89:b7:00:04:3e:1a:09:a8:30:a6:31:62:58:6a:5c:95:3f:3e:
         1c:50:cf:75:5e:ef:f1:2e:f0:e3:3d:80:c6:c2:f4:07:ec:47:
         00:2f:36:af:4b:a4:06:24:e0:30:da:a3:71:10:97:c3:3e:81:
         25:35:79:7f:28:f4:92:5d:6e:b3:22:07:b3:62:12:70:4a:cd:
         1b:a5:d6:06:f8:2a:a8:b5:0a:c7:e7:39:6d:6f:f7:e3:e4:39:
         c4:77:66:c8:40:43:84:00:24:7c:f5:98:2d:66:cb:4f:35:60:
         c2:34:7a:fa:53:f5:29:0e:85:4b:00:08:74:ed:0f:88:e3:4a:
         1f:4c:87:59:d6:0b:53:4d:ec:4f:e1:0c:75:3d:4c:04:4a:aa:
         d7:ee:02:75:bb:a0:40:43:78:e5:89:bf:aa:ab:4b:a8:49:7a:
         53:34:f9:4e:b2:8e:da:9f:1b:10:7d:61:09:77:0f:d8:63:87:
         bb:ec:d9:5c:eb:f2:f2:a3:cf:cb:e3:93:21:62:d1:5f:3c:e5:
         5c:5c:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----